Redundant fail-proof amplifier and alarm



United States Patent 2,824,296 iiEDUNDAN'r FAIL-PROOF AMPLIFIER AND ALARM Herbert Hecht, Wantagh, N. Y., and Christopher Pottle,

New Haven, Conn., assignors to Sperry Rand Corporation, a corporation of Delaware Application September 20, 1955, Serial No. 535,459

12 Claims. (Cl. 340-253) The present invention relates to redundant amplifie and failure detection means therefor.

Dual-path redundant amplifiers of the redundant type have been constructed for providing an output which is not appreciably changed by a malfunction in one or more amplifier components of one or the other amplifier paths. One such amplifier is disclosed in copending U. S. Patent application, Serial No. 535,367, filed on September 20, 1955, in the names of Herbert Hecht and Christopher Pottle, and is extremely valuable for use in electronic flight control systems. Since most component malfunctions in such an amplifier will not appreciably change the amplifier output, it may be desirable to provide means for indicating that a malfunction exists. Thus, the amplifier could be repaired or replaced before a further component malfunction occurs which, together with the first-mentioned malfunction, might otherwise seriously impair or destroy the amplifier operation.

It is, therefore, an objectof the present invention to provide an essentially fail-proof redundant amplifier system including means for readily detecting an amplifier component malfunction even though the amplifier output may not be appreciably affected by the malfunction.

It is a further object of the present invention to provide a failure detector system for a redundant amplifier as aforedescribed which is capable of providing an alarm for malfunctions in either the amplifier or the detector system.

It is yet another object of the invention to provide a failure detector system as aforedescribed for readily providing an indication of a malfunction in any of a large number of redundant amplifiers.

It is a further object of the present invention to provide a fail-safe amplifier as might be used in flight control systems with provisions for readily providing an inflight check of amplifier operation without interrupting the performance of the amplifier in the system.

The foregoing and other objects and advantages of the present invention, which will become more apparent from the detailed description thereof, are attained by coupling the inputs of a redundant amplifier having dual paths of amplification to a source of oscillator voltage at a frequency appreciably different from the amplifier signal frequency. The oscillator should supply cophasal voltages to the two paths of amplification for a push-pull type amplifier or should supply push-pull voltages to the two paths of amplification for a parallel type amplifier. In the absence of an amplifier component malfunction, voltages at the aforementioned oscillator frequency substantially cancel each other in the redundant amplifier. A detector coupled to the amplifier is provided for detecting a voltage at the oscillator frequency whenever there is a net oscillator voltage in the system attributed to a component malfunction in one or the other amplifier paths. The detector is not responsive to amplifier signal voltages, and, is of the type which gives an alarm when a relay contact is opened. A failure in certain compo- "ice nents of either the amplifier or detector causes an open: ing of the aforementioned relay contacts and, thus, an alarm.

Referring to the drawings,

' Fig. 1 is a general schematic diagram of a fail-proof push-pull amplifier and detector system in accordance with the present invention,

Fig. 2 is a detailed schematic diagram of a push-pull amplifier in combination with the detector alarm system of the present invention, and

Fig. 3 is a schematic diagram of an input circuit for the detector alarm system for monitoring a plurality of redundant amplifiers.

Referring to Fig. 1, the block designated by the numeral 2 refers to a source of push-pull alternating signal voltage at a frequency F The numeral 3 designates a center-tapped impedance across which a balanced push-pull voltage from the source 2 is developed for supply to first and second amplifier channels A and B designated by numerals 4 and 5, respectively. The amplifier channels 4 and 5 may comprise a redundant type amplifier as described in the aforementioned application Serial No. 535,367, for example, so that if there is a failure in a component in either channel there will be substantially no change in the push-pull voltage developed across a center-tapped primary winding of an amplifier output transformer 6. The output from the transformer 6 is supplied to a suitable amplifier load 7.

A low impedance oscillator 8 has an output terminal connected to the center-tap of the impedance 3 for supplying the amplifier channels 4 and 5 with equal cophasal voltages at an oscillator frequency F of ten times the frequency F of the voltage from source 2, for example. If both of the amplifier channels 4 and 5 have a bandwidth including frequency F and provide the same degree of amplification and there is no malfunction of a component-therein, equal voltages at the frequency F, will be developed across the center-tapped primary winding of the transformer 6. The aforementioned voltages at the frequency F cancel each other in the windings of transformer 6 so that there is no output voltage at the frequency F developed at the secondary winding of transformer 6. If there happens to be a component malfunction in one of the amplifier channels 4 or 5, a voltage at the frequency F will be developed across the secondary winding of the transformer 6.

A detector 9 is coupled across the aforementioned secondary winding of transformer 6 for response to a voltage at the frequency F without being responsive to voltages at the amplifier signal frequency F for energizing load 7. The detector 9 is adapted to provide an indication or alarm that one or the other of the amplifier channels 4 or 5 is functioning improperly and a net voltage at the frequency F is developed across the secondary of transformer 6.

The arrangement of Fig. 1 comprises a failure detector alarm system for a redundant amplifier of the push-pull type wherein cophasal voltages at the frequency F are supplied to the push-pull inputs of the amplifier for cancellation in a push-pull output circuit thereof when equal amplification is provided by each amplifier channel. It is apparent that a failure detector alarm system could be provided under the scope of the present invention for a parallel amplifier circuit wherein a push-pull voltage of the frequency F is supplied to the inputs of a pair of amplifiers in parallel for signal voltages at frequency F whereby the push-pull voltage of frequency F would cancel in the amplifier output whenever equal amplification is provided by each parallel connected amplifier.

A schematic diagram of an actual embodiment of the invention is illustrated in Fig. 2 where numerals 11, 12,,

13 and 14 designate four triodes connected tpgetherto farm a 't'wos'tage push-pull amplifier. Triodes 11 and 12 may comprise a duo-triode t acuum tube having a'separate cathode, grid and-plate for each triode all enclosed in a single evacuated envelope. Similarly, triodes13 and 14 may cer'n'prise a duo-triode Vacuum tube having a separate cathode, grid and plate for each triode all enclosed in a single evacuated envelope. h

An iron core transformer 18 is coupledto the triodes 11 and 13'forsupp1ying the grids thereof with apush-pull voltage from a source 19' of alternating signal voltage for the amplifier at a'frequency F The transformer 18 has an input winding '20 and a pair of push-pull or b'alanced output windings 23 and 24 with an electrostatic shield 25 between 'the input and output windings for reducingth'e amount of noise coupledto windings 23 and 24. One pair of terminals at points of o'ppositephase in the windings 23 and '24 are coupled to the grids of triodes 1'1 and 13. The other pair of terminals for the output windings 23 and 24 are respectively coupled to ground through resistors 26 and 29 of large resistance value and portions of a center-tapped resistor 30 whose function will become more clear below. If desired, the resistors 26 and 29 could be connected between the grids of triodes 11 and '13, respectively, and the aforementioned'one'pair of terminals oftrans'forrnerwindings 2 3 and '24, respectively, instead of having the connections illustratedin'Fi'g. 2. p

The'triodes "11 and 13 are c'ouple'dback to'backwith equal cathode-biasing resistors 31 and 32 coupling the cathodes of triodes 11 and 13 to ground, respectively. The plates of triodes 11'a'nd 13 are coupled through equal load resistors-35and 36, respectively, to separate sources of similar B+ potential for supplying the plates' of triodes 11 and 13' with equal operating potentials. Capacitors 37' and 38 are connected across plate resistors 35 and 36, respectively, for attenuating and shifting the phase of voltagesat high'fre'que'ncies above the region of'tw'ent'yfive times the frequencies for which the amplifier is'designed s'o asto prevent undesired high frequencyos'cillations.

The plate of inputtriode 11 is coupled to the'grid of output triode '12 through an R-C coupling network comprising c'apacitor 41 and resistor 42. Similarly, the plate of inputtriode 13is coupled to the grid of outp'ut'trio'de 14 through an R-C coupling network comprising eapaci-' tor 43 and resistor 44. The aforementioned coupling networksare'adapted to supply'a balanced push-pull signal'v'oltage to the grids'o'f triodes 12 and 14 from the plates of triodes 11 and 13.

The cathodesof triodes '12 and 14 are coupled to ground through a pair of equal'cathode biasing resistors 47-ari'd-48, respectively. The plates of triodes '12 "an'd14 are coupledto theseparate sources 'of 3+ supply voltage indica'te'd'in Fig. 2 through a pair of push-pull primary windings 49 and 0, respectively, of an iron core transfoi'rner 53. A current limiting resistor 54 is' connected between'one of'the B+ -s'upplyvoltages and'the transformer winding 49. Similarly, a current limiting resistor 55 is connected-between the other B+ supply voltage and the transformef'winding 50. The resistors 54 and 55 have'eqnal resistancevalues of considerably smaller magnitude thanthe resistancevalues of plate resistors 35 and 36'fortriodes 11 and 13. The cathode resistors '47 and 48 should have smaller resistancevalues than cathode resistors 31 and '32-so as to obtain suitable biasing potentials for the triodes 12 'and 14.

The tra sformer- 53 includes a center-tapped secondary winding561 for deriving a degenerative feedback fvoltage for the amplifier. The center-tap ed resistor "30 is connee'ted across'-the-'wiuding 56 so'that' any suitable amount of =-negative feedback can ne supplied' back 'to" the i grids of triodes 5 11 and- 13 'by-ctinnecting"-'terminals of respective ones of-feedback res'istors26and 29 to Opposite points from-"g"round upon the "resistor- 30.

Sincethe cathode resistors of triodes 11-14 are unbypassed, a certain amount of degeneration of the input signal to the grids of these triodes would ordinarily take place. A resistor 59 is coupled between the cathodes of triodes 11 and 12 in one path of amplification for providing enough positive regeneration to compensate for the degeneration brought about by the un-bypassed cathode resistors of triodes 11 and 12. Similarly, a resisto'r60 is coupled between the cathodes of triodes 13 and 14 in the-other path of amplification -for providing enough positive regeneration for-compensatin'g for the tin-bypassed cathode resistors utilized'with thetriodes 13and 14. Resistors 59 and 60 may be of equal resistance value and'afe hosen so that thear'n'ount of positive feedback introduced thereby is well tielow the point of instability, but, is more than enough to compensate for the un-bypassed cathodes.

In the operation of the system shown in'Fi'gWZ as an amplifier, an input voltage signal of frequency F at the primary winding 20 of transformer 19 is converted into a=push -pull voltage and applied to the grids of-input triodes 11 and 13, respectively. The'push pull voltage is amplified by triodes 11 and 13, which are 'adapted to serve asclass A amplifiers, and supplied to the grids of triodes 12-and14forfurther class-A amplification. An amplified signal output voltage is'desiredfrom an output secondary winding 67 of transformer 53 and supplied to a suitable load 68.

-The.push-pull feedback voltage Supplied to the grids of -tri( des 11 and 13 from-resistor 30 is for stabilization purposes. In the event of a'malfunetion in one ofthe triodes11 1 4 in one path of amplificatio'n'for the :pushpull input signal voltage, the pair of-triodes comprising the other path for amplification will be driven-harder since there will be less feedback voltage developed at the time of the-failure for reducing the net signal'-voltag'e supplied to the grid of the input triode of the operating path of amplification. Thus, the-output voltage across winding 67 can be made to lac-substantially independent of a" failure orfai lures in one or the other paths of amplificatio'n} One circuit has been constructedfor operatio'n at 400 cycles. per second wherein there isless than a 10% change in the voltage gain of the output signal supplied to load68 from output winding 67 whenever one of the paths of amplification fails.

The amplifier of Fig. l is extremely reliable and rugged and"substantially unaffected by any failure in a tube or cdrriponent'therewith. For example, if there were to be grid to-cathode or grid-to-plate short in either of input triodes 11 or 13, one of the feedback resistors 26 and 29 would prevents shortof the input transformer 18- which would otherwise destroy the output provided by the amplifier. Theresistors54 and SS in series with the plates of'the"outpiit triodes 12 and '14 serve two purposes. In

the event (if a 'plate to-catho de short ora-plate-to-g'rid short inan ontputltriode '12 or 14, the' shorted triode ofi ershr'erj lit'tle resistance to current flow. A resistor 'sutzh as" 4"or 55,-d'ependingupon which tube is shorted, then' becomes a eurrent limiting resistance for. the tubes powersupply'ind" prevents short circuiting of a primary windifigjof -the ou 'ut transformer '53. In the event of such"a"s ort'in one or triodes-12' or 14, the resistor 54 Sinceftli'e jaforedescribed amplifier is' essentially detegia component i failure s'o'that the amplifier can 'be-rep' der replae dbtor'ettnrrther componentt imre occurs w r it together wirh 'thefigsfimentionedfailure, mi'ght 'im'p'air or destroy the amplifier operations. The

remaining part of the circuit shown in Fig. purpose.

The numeral 71 designates a low impedance oscillator for generating an alternating voltage at a frequency P of the order of ten times the amplifier signal frequency F frequency F being within the amplifier bandwidth. The oscillator 71 is preferably of a very stable type, such as a resistance-capacitance phase shift oscillator, and should have a low output impedance compared with the resistance of the resistor 30.

The output of the oscillator 71 is coupled between the center tap of the secondary winding 56 of transformer 53 and the grounded midpoint of resistor 30. Since the voltage from oscillator 71 is supplied to the center-tap of winding 56, the magnetic flux in each half transformer winding 56 caused by the currents at the frequency F oppose each other so that there is no coupling back to the primary windings 49 and 50 of transformer 53. Cophasal voltages of frequency F are derived between the above ground terminals of resistor 30 and supplied back through the feedback resistors 26 and 29 to the inputs of triodes 11 and 13 so as to be of equal amplitude. If the two paths of amplification of the push-pull amplifier are both functioning properly, the resultant cophasal voltages at frequency F at the outputs from the plates of triodes 12 and 14 are equal. The current flow through the primary windings 49 and 50 of transformer 53 for such an output will be equal and in opposite directions so that the magnetic fluxes of windings 49 and 50 cancel each other and there can be no output at the frequency F generated across the transformer output winding 67. If, for some reason one of the paths of amplification of the aforedescribed amplifiers contains one or more malfunctioning components so that the amplification therein is not as large as the other path, the currents at the frequency F through the balanced windings 49 and 50 will no longer be of equal magnitude. Therefore, a voltage will be induced across the output winding 67 at the frequency F for delivery to a tuned detector indicated by block 72.

The detector 72 has a resonant input circuit comprising a capacitor 73 and inductor 74 tuned to the frequency F The junction between capacitor 73 and inductor 74 is coupled to the grid of a triode amplifier 76. The terminal of inductor 74 remote from the grid of triode 76 is coupled to ground through a resistor 77, which may be selected for obtaining a bandwidth of the resonant circuit compatible with the stability of oscillator 71.

The plate of the triode amplifier 76 is coupled to a source of B+ voltage supply voltage through a load resistor 78. The cathode of the triode 76 is coupled to ground through a cathode biasing resistor 79 bypassed at the frequency F by a capacitor 81.

A serially connected capacitor 82 and resistor 83 are connected between the plate of triode 76 and a further triode 84. The junction terminal between the capacitor 82 and resistor 83 is coupled to ground through a rectifier 86 whose anode side is designated by the arrowhead in Fig. 2. The grid of the tube 84 is connected to ground through a capacitor 87.

The cathode of tube 84 is grounded, the plate thereof being coupled through a relay winding 88 to a source of B+ voltage supply for operating the tube 84. The tube 84 is designed so that it is ordinarily conducting with no bias on the grid thereof. The current through tube 84 passes through the winding 88 and provides a magnetic flux for maintaining a relay armature 89 in a closed position with respect to terminal 91 against the force of a spring 92. This completes a circuit for a meter 93 having a battery 94 for supplying a current for energizing a magnetically operated warning fiag 96 to prevent it from being seen through the meter window 97. A magnetically operated meter as aforedescribed is conventional in the art so needs no detailed description, it being operated so that when the contact between armature 2 is for this 89 and terminal 91 is broken the warning flag 96 is swung into position so as to be visible through window 97.

In operation of the detector alarm 72, whenever there is a voltage provided at the output transformer winding 67 at the frequency F it is amplified by the triode 76 and supplied as a negative biasing voltage to the grid of the tube 84. This occurs because the elements 82 and 86 are chosen so that on positive half cycles of the plate voltage of triode 76, the capactor 82 is charged almost immediately through rectifier 86, whereas ou'i negative half cycles, the capacitor 82 is discharged only a small amount. Thus, the average voltage at the junction between capacitor 82 and 86 is negative with an alternating voltage output from triode 76. The circuit comprising resistor 83 and capacitor 87 acts as a smoothing circuit whereby a substantially unidirectional negative voltage is maintained at the grid of tube 84 to bias it below cut-off when triode 76 is providing an output. Thus, whenever the current through tube 84 and relay winding 88 ceases, the switch contacts 89 and 91 of the relay are opened and the flag 96 of indicator 93 will move to a position so as to be visible through window 97 and provide an indication that there is a component malfunction somewhere in the amplifier. It can readily be seen that the indicator 93 will also provide an indication of a malfunction in most components of the detector alarm since the relay contacts 89 and 91 must be closed with triode 84 conducting for preventing the flag 96 from being visible.

It may be desirable to monitor a large number of amplifiers of the type shown in Fig. 2 for detecting a component malfunction therein. Therefore, the tuned input circuit to the detector shown in Fig. 2 may take the form illustrated in Fig. 3. The various loads in Fig. 3 refer to respective loads for different redundant amplifier's, the letter n referring to the total number of loads. The letters C C and C refer to respective capacitors for each of the loads, C referring to the total parallel capacitance of the circuit. It can be readily seen that total capacitance C shown in Fig. 3 can be easily designed for resonance with inductor 74 at the frequency F for monitoring a large number of amplifiers while providing no effect on amplifier operation.

Since many changes could be made in the above construction and many apparently widely difierent embodiments of this invention could be made without departing from the scope thereof, it is intended that all matter contained in the above description or shown in the accompanying drawings shall be interpreted as illustrative and not in a limiting sense.

What is claimed is:

1. In combination, a dual-path amplifier having input means for receiving an alternating voltage signal of a first frequency for amplification, an output for said amplifier, means coupled to said amplifier for supplying alternating voltages to the dual paths thereof at a second frequency appreciably different from said first frequency, the phase relationship of the voltages of said second frequency applied to the dual paths being predetermined for cancellation at said output under conditions of equal amplification through the dual paths of said amplifier, and detector means coupled to said output of said amplifier and responsive to voltages of said second frequency, said detector means being adapted to provide an alarm in response to a net voltage at said second frequency at said amplifier resulting from a malfunction at one or the other of said amplifier paths.

2. The combination set forth in claim 1, wherein said detector means includes a relay winding and a grid controlled vacuum tube having an output in series with said relay winding, and means coupled to the grid of said vacuum tube for biasing said tube below cut-01f in the presence of an alternating voltage of said second frequency supplied to said detector means from said amplifier.

3. The combination as set forth in claim 2, further inclii'clinga relay to alrclfiytwlttact termin a fi ns u 1tu c srw duc ng u r'ent aiid vannin'dicator coupledbetweengsaid relay armatureandsaid contact terminal torrr vi ne-a alarm dication whenever the connectionbetween said relay contact' terminal and armature is openedat a time when said vacuum tube is biased: below cutoff.

, 4. The combination as set forth in claim 1, avherein said detector means includes a meter having a source, of current for operation of said meter in afii's t state for providing an indication that a substantially zero net-voltage at said second'freq'uency is provided .by said amplifier, said detector means including a gating circuit responsive to a net voltage at said secondafrequency provided by said amplifier for cutting ofi said .niet er current and operation of said meter in a secondstate for providing an alarm indication. p

'5. The combination as s'etforthin claim. 1, wherein said amplifier is of the push-piill type having, push pull input winding means and a push-pull output a ena, push-pull feedback winding meanscoupled to said output circuitfor feeding back a degenerative stabilizing push-pull voltage to said input winding means, and a low impeda ,ei1- lator coupled to the electrical mid-point ars iapjrsu pun feedback winding means for supplying coplias'al voltages of said second frequency to said amplifier input winding ing an amplified output version of an inputfsig vet care at a first'fi'equency, means couple'd'to said lifier'for providing degenerative feedback-therein s j iiplification of said' input signal voltage is s ly mdependent of a malfunction in one or theotherof said paths of amplification, -a low impedanceoscillatorfcoiipld to said amplifier for supplying cophasa'l voltages'fof; 'n al amplitnde'and asecond frequency appreciably different from said first frequency to-s'aid first and s'econd'pathsof amplification for cancellatiori'in said amplifier-under conditions of equal amplification through said paths, and a detector responsive t veua es of'sa'id secondfrequer'ipy, said detector being coupled to said-amplifier for-providing an alarm'in res pnsetoune nal amplificationof saidcopha's'al voltages of said; second frequency-by saidfirst and secondipaths of amplification.

7. An amplifier system'=- as set forth inclaim' 6, wherein said detector comprises arelay couple'd to tlieoutput-of a grid controlled vacuum tube, a tuned' detebtorinput'circuit resonant to said second frequency, and g'rid biasing means between:saidulastmarned circuit and-:me' rid er said vacuum tube for biasingf said tuber-belowpu't nffi in response to a voltage supplied to said-tuned input circuit having said second frequency.

8. A detector alarm'rcircuit for'providing an alarmindication of the presence-of ariinput alternating voltage-at a predetermined :frequency; comprising anlinput circuit rcsponsive to said predetermined frequency, aunete'r "having a-source of current in;serie's'-?with an: armature switch member for operation in .a :first statez foriproviding an indication that substantially; zero net voltage-atsaidpredetermined frequency ,isrpresent at: said input 1 circuit, a relay for operating' said armature-switch:member,'-means coupled between:'said"relay:--Jand said input circuit for energizing said relay and :operating said switch niember and meter in said first state in the presence of--a'iz'ero net inputalternatingvoltagegzsaid lnsementioned means being tubes .coupl responsive to an input voltage of a predetermined magnitude, for de-energizing ,said relayand operating said switch member for cutting-off said meter currentfor operation of. said meter in a second state for providing. an indication of .the presence. of a voltage input at said predetermined frequency.

A detector alarm circuit as set forth inclaim 8, wherein said input circuit comprises a resonant inductorcapacitor circuit.

10, A detector alarm circuit as set forth in claim 8, wherein said input circuit is resonant to said predetermined; frequencynand comprises a plurality of capacitors in parallel with each other, each capacitor having a first terminal conpled to afirst terminal of inductor means for resonance therewith,.a plurality of sources of voltage, at said-predetermined frequency, and a pluralitylof input terminals coupled to said sources, said last-named terminals comprising-second terminals-of respective ones of said capacitors and a second terminal for said inductor means. I

l 1. A fail proofamplifier-detector system for providing an outputvoltage at a signal frequency while detecting for a malfunction in an amplifier component even through the amplifier. signal output voltage is vnot appreciably affected by such a. malfunction, said system comprising; a push-pull arnplifier havingfirst and second grid-controlled amplifien jtubes coupledtogether for providing one amplitying. p'a'f and-fla l du her dqn rqll damp e m mo-ta p v d n ermp i y p'a'tliin p hgpujll relationship with said first path, an input transforin rhaving balanced secondary windings coupled to the grids..of-.said firstand third tubes for, supplying a piish-p'nll signal voltage thereto, an voutput,transformer having balanced primary windings connected to the plates of saidise'c'o'nd and fourth, tubes for deriving apush-pull amplifier signal .voltage the'refrom, ,pushrp ull feedback winding means. cap leato said lastentioned windings for supplying aIdegenerativepush-pull feedbackvoltage to the grids of said first andthirdtubes, an oscillator for providing an output voltage of a frequency appreciably different' from said amplifier signal frequency, said oscillator having its output. coupled between an electrical midpoint of said push-pull feedback Winding arid ground, a further transformer winding coupled to the pair of primary windings connected to the plates of said second and fourth tubes, an amplifier signal load coupled across said further transformer winding, and a detector responsive .to the frequency of said oscillator, said detector being coupled across said load' for providing an indication of a failure in a component of said amplifier resulting in, unequal amplification in said first and said second amplifier paths.

12. A fail-proof amplifier detector system as set forth in claim lL Wherein s'aid detector includes a resonant input circuit tuned to said oscillator frequency and relay means in series with vacuum tube control means for regulating'c'urrent through said relay means, said control means being coupled to said resonant input circuit and responsive to a' voltage therefrom at said oscillator frequency for cut-ofiof said vacuum tube control means, and

an alarm circuit coupled to said relay means for providing an indication of current cut-off through said relay means.

' name-acumen "in the file of this patent UNITED STATES PATENTS 2,665,333 Job July 2 9, 1952 2,703,877 Stofi et al. Mar. s, 1955 

